Add basic info about Certificate Manager

README.md

@@ -54,6 +54,7 @@ Table of Contents
 | [Device Farm](#device-farm) | [📗](#device-farm-basics) |  |  |
 | [IoT](#iot) | [📗](#iot-basics) | [📘](#iot-tips) | [📙](#iot-gotchas-and-limitations) |
 | [SES](#ses) | [📗](#ses-basics) | [📘](#ses-tips) | [📙](#ses-gotchas-and-limitations) |
+| [Certificate Manager](#certificate-manager) | [📗](#certificate-manager-basics) | | |
 
 **Special Topics**
 
@@ -1445,6 +1446,19 @@ SES
 
 -       🔸**Internet Access:** SES SMTP endpoints are on the Internet and will not be accessible from a location without Internet access (e.g. a private subnet without NAT gateway route in the routing table). In such a case, set up an SMTP relay instance in a subnet with Internet access and configure your application to send emails to this SMTP relay instance rather than SES. The relay should have a [forwarding rule to send all emails to SES](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-email-smtp-existing-server.html)). ❗If you are using a proxy instead of a NAT, confirm that your proxy service supports SMTP.
 
+Certificate Manager
+-------------------
+
+### Certificate Manager Basics
+-	📒 [Homepage](https://aws.amazon.com/certificate-manager/) ∙ [User guide](http://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html) ∙ [FAQ](https://aws.amazon.com/certificate-manager/faqs/) ∙ [Pricing](https://aws.amazon.com/certificate-manager/pricing/)
+- **Certificate Manager** is an AWS service for managing SSL/TLS certificates for AWS services.
+- Supports import of already owned certificates and issuing new certificates.
+
+### Certificate Manager Alternatives and Lock-in
+- Service allows import of existed certificates without limitations, but certificates issued via this service can't be used outside of AWS.
+
+🚧 [*Please help expand this incomplete section.*](CONTRIBUTING.md)
+
 High Availability
 -----------------